$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85a1297c-2bf1-332a-916a-57f701a2a34a.roa File: 85a1297c-2bf1-332a-916a-57f701a2a34a.roa (raw, json) Hash identifier: a8E9rBeyh4bfDtejyZbhn1JP5V+FcGvVBkT1RFSWBeg= Subject key identifier: 0F:BD:DC:55:F7:C9:93:40:3E:EB:99:6D:FF:33:D5:6D:73:E1:14:E5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5910886E7408E606527B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85a1297c-2bf1-332a-916a-57f701a2a34a.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 98.33.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:59:10:88:6e:74:08:e6:06:52:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=6df6f409-114b-4d4d-99f2-d6272363b0b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:67:42:7b:17:8e:33:9b:5d:52:fe:7c:59:c6: 4e:a9:be:6c:fe:22:6a:8d:77:11:43:3e:09:3c:45: f7:d9:cc:7b:1f:f9:88:3c:4c:99:93:a7:87:23:ba: 8f:b8:ed:f9:cf:be:15:fc:a2:af:05:14:5d:93:ff: 6c:35:c1:56:31:ed:3d:0f:ec:54:27:d2:4f:3a:61: bb:a6:4f:25:1a:9e:47:82:19:a3:e1:64:e5:0d:6b: 9e:06:97:8e:8c:a3:3b:89:7f:eb:6b:1c:d3:f1:e2: 42:1b:4b:a0:59:80:d5:27:44:58:7b:cb:54:31:3b: 4e:6f:25:32:bc:9c:b5:78:07:16:40:06:d1:2f:b3: 08:25:7c:5c:32:14:1a:e4:36:5f:41:18:06:22:2d: 21:6e:44:e8:73:e4:2e:e9:a4:dc:a9:8b:ce:09:6e: cd:02:78:21:2e:f3:e4:ab:aa:78:d3:b6:40:e4:96: 90:4e:08:28:c5:4b:25:5a:64:cc:1f:96:56:5c:ae: ed:27:67:ef:be:e1:83:9b:a5:52:27:0b:21:6e:44: 2d:07:e1:31:b5:48:0a:09:1c:a3:9e:43:dd:cc:60: f2:4c:d2:0b:45:5e:38:d0:b1:d0:0a:8d:5b:be:ef: b3:7b:a1:ab:b2:1a:bb:b6:71:7e:e3:0e:aa:62:27: 58:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BD:DC:55:F7:C9:93:40:3E:EB:99:6D:FF:33:D5:6D:73:E1:14:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85a1297c-2bf1-332a-916a-57f701a2a34a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.33.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:5e:a1:d5:0c:12:51:28:f1:8d:ca:65:2f:42:07:91:09:83: 82:2a:32:60:03:d3:bb:61:6d:f0:05:b2:63:a1:23:16:72:16: 70:67:ca:01:d1:d2:47:39:1f:11:fe:87:69:c9:05:ef:aa:b8: 6d:d9:62:dd:99:c9:41:a9:bf:60:07:35:a9:b5:96:8e:78:c3: 1d:7b:6d:1f:5d:f9:bb:a7:e6:e4:e6:68:be:2c:1c:ea:46:00: 15:5d:8f:3e:34:25:cd:c6:8d:13:fa:eb:b6:cc:f2:68:a9:b4: 70:5b:d7:8e:2b:55:c4:a1:28:6b:71:f8:ca:a5:30:5e:3c:9b: ae:f1:1e:c1:32:3c:31:05:25:8e:8e:68:20:41:ed:22:e4:f0: 42:2c:fc:79:2f:6f:4a:c8:6c:c6:4b:38:c9:8a:b9:70:03:8f: c0:14:01:ff:6f:85:02:39:7d:32:a7:17:e2:e2:bf:ed:85:15: 32:ec:8c:be:60:85:da:99:df:a0:44:d5:dc:5a:d5:ed:64:ef: 6f:fa:de:a6:70:19:50:5b:27:13:c7:f5:fc:4c:7a:f7:2f:29: d7:4e:d9:a4:65:07:10:6b:26:c8:08:82:b2:f1:3f:00:00:a3: d1:ed:38:dc:ab:96:b2:83:8f:d8:a9:62:23:7e:ee:bb:8d:0e: b0:7a:fe:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWRCIbnQI5gZSewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NmRmNmY0MDktMTE0Yi00ZDRkLTk5ZjItZDYyNzIzNjNiMGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGdCexeOM5tdUv58WcZOqb5s/iJqjXcRQz4J PEX32cx7H/mIPEyZk6eHI7qPuO35z74V/KKvBRRdk/9sNcFWMe09D+xUJ9JPOmG7 pk8lGp5Hghmj4WTlDWueBpeOjKM7iX/raxzT8eJCG0ugWYDVJ0RYe8tUMTtObyUy vJy1eAcWQAbRL7MIJXxcMhQa5DZfQRgGIi0hbkToc+Qu6aTcqYvOCW7NAnghLvPk q6p407ZA5JaQTggoxUslWmTMH5ZWXK7tJ2fvvuGDm6VSJwshbkQtB+ExtUgKCRyj nkPdzGDyTNILRV440LHQCo1bvu+ze6Grshq7tnF+4w6qYidYzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+93FX3yZNAPuuZbf8z1W1z4RTlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODVhMTI5N2MtMmJmMS0z MzJhLTkxNmEtNTdmNzAxYTJhMzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYiFJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpeodUMElEo8Y3KZS9CB5EJg4IqMmAD07thbfAFsmOhIxZyFnBnygHR 0kc5HxH+h2nJBe+quG3ZYt2ZyUGpv2AHNam1lo54wx17bR9d+bun5uTmaL4sHOpG ABVdjz40Jc3GjRP667bM8miptHBb144rVcShKGtx+MqlMF48m67xHsEyPDEFJY6O aCBB7SLk8EIs/Hkvb0rIbMZLOMmKuXADj8AUAf9vhQI5fTKnF+Liv+2FFTLsjL5g hdqZ36BE1dxa1e1k72/63qZwGVBbJxPH9fxMevcvKddO2aRlBxBrJsgIgrLxPwAA o9HtONyrlrKDj9ipYiN+7ruNDrB6/nI= -----END CERTIFICATE-----Generated at Sun Mar 1 20:47:42 2026 by rpki-client